User limbenjamin

89 votes

Accepted

Is SSL dying? Should I buy SSL certificates for my sites any more?

answered Nov 30, 2014 at 7:57

50 votes

Why would security cover things like natural disasters?

answered Jan 10, 2016 at 11:20

42 votes

Accepted

Is it possible to "read" secure (using SSL or TLS) messages if you know the message?

answered Apr 22, 2015 at 12:09

33 votes

Accepted

Why doesn't DNS spoofing work against HTTPS sites?

answered Jul 18, 2015 at 19:25

18 votes

Accepted

Is it unsafe to keep multiple versions of a KeePass database?

answered Aug 1, 2015 at 18:38

13 votes

Accepted

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

answered Jan 8, 2015 at 11:44

9 votes

Accepted

What is a salami attack?

answered Dec 16, 2014 at 10:03

8 votes

Accepted

Best practices to copy private keys to mobile devices

answered Dec 23, 2014 at 15:08

5 votes

How dangerous is it to reveal your date of birth, and why?

answered Jul 27, 2015 at 7:18

5 votes

Can bankers' rounding be exploited to maliciously increase balances?

answered Dec 1, 2014 at 8:14

5 votes

Using Linux iptables to implement a stateless, packet filtering firewall

answered Dec 8, 2014 at 12:34

5 votes

Is my ssh server safe because I use DenyHosts and don't allow root access?

answered Aug 10, 2014 at 12:05

4 votes

Shielding electromagnetic wave

answered Nov 24, 2014 at 3:17

4 votes

How to protect a Wifi network from Microsoft WiFi Sense

answered Jul 31, 2015 at 6:48

3 votes

Accepted

MITM on program with no proxy settings

answered Nov 24, 2014 at 3:26

3 votes

How to securely store sensitive data on mobile application?

answered Nov 26, 2014 at 12:35

3 votes

Keepass - Needle in a stack of needles

answered Aug 4, 2015 at 17:21

3 votes

Accepted

Is it okay to have a blank root password for MySQL if port 3306 is not forwarded?

answered Nov 12, 2015 at 2:28

3 votes

What is the point in a password manager?

answered Jan 21, 2016 at 14:47

3 votes

Is there a civilian friendly indicator of stored password safety?

answered May 28, 2016 at 16:02

2 votes

Website says my new password can't be used because it is the same as an old one

answered Jun 18, 2016 at 11:41

2 votes

What exactly does "Nation-State" code look like?

answered Dec 22, 2015 at 1:46

2 votes

The effect of hidden or spoofed service banners on vulnerability scanners

answered Dec 2, 2014 at 12:54

2 votes

End user security awareness measurement

answered Dec 3, 2014 at 12:32

2 votes

Accepted

With HTTPS, what information would a MitM attacker be able to glean?

answered Nov 25, 2014 at 12:16

2 votes

What is 0xXXXXXXXX.asc.sig and how can I generate this?

answered Nov 26, 2014 at 1:55

2 votes

Wildcard DNS entry from a security PoV

answered Nov 26, 2014 at 5:54

2 votes

Does setting a default DROP policy actually improve security?

answered Jul 23, 2015 at 20:17

2 votes

Accepted

Smart Card for RSA private key for SSL?

answered Jan 1, 2015 at 12:55

2 votes

What are the risks of file server access over wireless?

answered Apr 22, 2015 at 12:18

Stack Exchange Network

52 Answers

Is SSL dying? Should I buy SSL certificates for my sites any more?

Why would security cover things like natural disasters?

Is it possible to "read" secure (using SSL or TLS) messages if you know the message?

Why doesn't DNS spoofing work against HTTPS sites?

Is it unsafe to keep multiple versions of a KeePass database?

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

What is a salami attack?

Best practices to copy private keys to mobile devices

How dangerous is it to reveal your date of birth, and why?

Can bankers' rounding be exploited to maliciously increase balances?

Using Linux iptables to implement a stateless, packet filtering firewall

Is my ssh server safe because I use DenyHosts and don't allow root access?

Shielding electromagnetic wave

How to protect a Wifi network from Microsoft WiFi Sense

MITM on program with no proxy settings

How to securely store sensitive data on mobile application?

Keepass - Needle in a stack of needles

Is it okay to have a blank root password for MySQL if port 3306 is not forwarded?

What is the point in a password manager?

Is there a civilian friendly indicator of stored password safety?

Website says my new password can't be used because it is the same as an old one

What exactly does "Nation-State" code look like?

The effect of hidden or spoofed service banners on vulnerability scanners

End user security awareness measurement

With HTTPS, what information would a MitM attacker be able to glean?

What is 0xXXXXXXXX.asc.sig and how can I generate this?

Wildcard DNS entry from a security PoV

Does setting a default DROP policy actually improve security?

Smart Card for RSA private key for SSL?

What are the risks of file server access over wireless?